Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.15-2026-110 (ALASKERNEL-5.15-2026-110)

"The version of kernel installed on the remote host is prior to 5.15.210-148.245. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.15-2026-110 advisory. In the Linux kernel, the following vulnerability has been resolved: nfsd: fix heap overflow in NFSv4.0...

CVE-2026-43350

A flaw was found in the Linux kernel CIFS/SMB client when parsing DACLs parsedacl. An ACE could match the Unix NFS mode SID prefix with only two subauthorities; code then read subauth2 for mode bits, accessing four bytes past the end of the ACE buffer. Upstream requires numsubauth = 3 before...